The lock-lab Key Vault is gone, but an encrypted Key Vault backup blob remains. How should the security engineer recover the objects?
Select an answer to reveal the explanation.
Short Explanation
That backup blob isn’t a diary—you can’t open it as plaintext. Restore it into a Key Vault that sits inside the geography and subscription rules Microsoft documents for restore.
Full Explanation
Key Vault object backups restore only into a Key Vault subject to Microsoft’s geographic and subscription constraints for the backup format. The blob remains encrypted and is not a cleartext key export. Publishing backups publicly or treating them as readable files defeats the control. Network configuration cannot substitute for cryptographic object restore.